Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-h87q-g2wp-47pj

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-h87q-g2wp-47pj

Signatures are mistakenly recognized to be valid in jsrsasign In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack.

gitlab/npm/jsrsasign/GMS-2022-64

Signatures are mistakenly recognized to be valid in jsrsasign In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack.